AMENDM ENT AND RESPONSE UNDER 37 C.F.R §1.111 Page 2 

Serial Number:09/7 1 8,097 Dkt: 962.077US 1 

Filing Date: November 22, 2000 

Title: SYSTEM AND METHOD FOR FACILITATING TRANSACTION PROCESSING AND DISPOSITION WITHIN AN ACCESS 
CONTROLLED ENVIRONMENT VIA A GLOBAL NETWORK SUCH AS THE INTERNET 



IN THE CLAIMS 



Please amend the claims as follows: 

1 . (Original) A system for facilitating processing and disposition of a transaction within an 
access controlled environment, comprising: 

an access control facility accessible via a global data processing network and configured 
to maintain user information, and to permit or deny a user to enter an access controlled 
environment within a data processing environment and to perform user operations within said 
access controlled environment; 

a transaction management facility operable within said access controlled environment, 
coupled to said access control facility, and configured to store and maintain transaction data 
based on said transaction, said user operations, and a security scheme; 

an authentication facility operable within said access controlled environment and 
configured to authenticate said transaction data based on an authentication scheme corresponding 
to said transaction; and 

a billing facility configured to consolidate data related to internal operations performed 
by said access control facility, said transaction management facility, and said authentication 
facility to generate and process billing data and to send a billing notice to a responsible party via 
said global data processing network. 

2. (Original) The system according to claim 1, wherein said global data processing network 
is the Internet. 

3. (Original) The system according to claim 1, wherein said access control facility includes 
a user registration facility permitting a user to be registered based on predetermined registration 
criteria prior to permitting said user to access said access controlled environment. 
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4. (Original) The system according to claim 1 , wherein said access control facility permits 
or denies access based on a user identifier and a user password. 

5. (Original) The system according to claim 1, wherein said access control facility is further 
configured to notify said responsible party when a user is denied access to said access controlled 
environment. 

6. (Original) The system according to claim 1, wherein said transaction management facility 
is configured to store and maintain said transaction data based on the type of said transaction. 

7. (Original) The system according to claim 1, wherein said transaction management facility 
is further configured to generate internal tracking data corresponding to said user operations 
within said access controlled environment. 

8. (Original) The system according to claim 1 , wherein said transaction management facility 
further comprises at least one analysis tool configured to be used by said user to analyze said 
transaction data within said access controlled environment to facilitate disposition of said 
transaction. 

9. (Original) The system according to claim 1, wherein said transaction management facility 
stores said transaction data in a plurality of formats corresponding to transaction party systems 
maintained by outside of said access controlled environment. 

1 0. (Original) The system according to claim 1 , wherein said security scheme corresponds to 
a predetermined data encryption scheme. 



1 1 . (Original) The system according to claim 1 , wherein said security scheme is set by said 
user. 
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12. (Original) The system according to claim 1, wherein said security scheme is set 
automatically based on the type of said transaction. 

13. (Currently Amended) The system according to claim [[14]] 1, wherein said authentication 
scheme corresponds to rules of evidence. 

14. (Original) The system according to claim 1, wherein said authentication scheme is 
established by said user. 

15. (Currently Amended) The system according to claim 1, wherein said authentication 
scheme is automatically set by said authentication system facility based on the type of said 
transaction. 

16. (Original) The system according to claim 1 , wherein said authentication facility further 
authenticates said transaction data based said user's identity. 

1 7. (Original) The system according to claim 1 , wherein said authentication facility further 
authenticates said transaction data based biometric data related to said user. 

1 8. (Original) The system according to claim 1 , wherein said authentication facility further 
authenticates said transaction data based forensic data related to said transaction. 

1 9. (Original) The system according to claim 1 , wherein said authentication facility further 
authenticates said transaction data base on forensic data related to said user. 

20. (Original) The system according to claim 1 , wherein said authentication facility 
authenticates said transaction data prior to said transaction management facility storing and 
maintaining said data. 
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21 . (Original) The system according to claim 1 , wherein said authentication facility 
authenticates said transaction data after said transaction management facility stores and 
maintains said data. 

22. (Currently Amended) The system authentication according to claim 1 , wherein said 
authentication facility requires said user to enter authentication data related to said transaction 
data and authenticates said transaction data based upon said authentication data. 

23. (Original) The system according to claim 1, wherein said billing facility generates a 
billing record related to said user operations within said access controlled environment. 

24. (Original) The system according to claim 1 , wherein said transaction management facility 
is further configured to automatically notify said user based upon a change to said transaction 
data. 

25. (Original) The system according to claim 24, wherein said transaction management 
facility notifies said user via an automatically generated electronic mail message. 

26. (Original) The system according to claim 25, wherein said automatically generated 
electronic mail message contains a reference to said transaction based on a predetermined level 
of vagueness. 
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27. (Original) A system for facilitating transaction processing and disposition within an 
access controlled environment, comprising: 

an access control facility accessible via a global data processing network and configured 
to maintain user information and to permit or deny users to login into an access controlled 
environment maintained within a data processing environment, said user information including a 
profile relating to each user of said users, each said profile including a user-specific level of 
security; 

a transaction management facility operable within said access controlled environment, 
coupled to said access control facility, and configured to store and maintain data related to a 
transaction involving at least one of said users based on a predetermined security level to 
facilitate disposition of said transaction within said access controlled environment, and to 
determine accessibility related to said data for said each user based on said each user's profile; 

an authentication facility operable within said access controlled environment and 
configured to authenticate said data related to said transaction based on a predetermined 
authentication level set to correspond to said transaction; 

a connectivity and communications facility coupled to said access control facility, said 
transaction management facility, and said authentication facility, said connectivity and 
communications facility configured to communicate with said access control facility, said 
transaction management facility, said authentication facility, and external transaction party 
systems to facilitate disposition of said transaction based on said data stored and maintained by 
said transaction management facility; and 

a billing facility configured to consolidate data related to internal operations performed 
by said access control facility, said transaction management facility, and said authentication 
facility to generate and process billing data and to send a billing notice to a responsible party via 
said global data processing network. 



28-50 (Canceled). 
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5 1 . (Original) A system for facilitating transaction processing and disposition within an 
access controlled environment, comprising: 

a plurality of user systems, each user system generating and processing data related to a 
transaction involving a plurality of parties; and 

a controlled access environment operating within a secure data processing system, said 
secure data processing system coupled to said plurality of user system via a global data 
processing network, said controlled access environment including a data store for storing and 
maintaining said data related to said transaction involving said multiple parties, an access control 
facility for permitting and denying said plurality of user systems to access said access controlled 
environment during the course of said transaction, an authentication system for authenticating 
said data within said data store, and a communications facility for notifying said user systems 
based on said data and for permitting said data processing system to securely interact with 
externally coupled systems to facilitate disposition of said transaction involving. 

52-69. (Canceled). 

70. (Original) A method for facilitating transaction processing and disposition within an 
access controlled environment, comprising the steps of: 

at an access control facility accessible via a global data processing network, maintaining 
user information and permitting or denying a user to login into an access controlled environment 
maintained within a data processing environment; 

at a transaction management facility coupled to said access control facility, storing and 
maintaining data related to a transaction based on a predetermined security level to facilitate 
disposition of said transaction within said access controlled environment; 

at an authentication facility, authenticating said data related to said transaction based on a 
predetermined authentication level; 

at a billing facility, consolidating data related to internal operations performed by said 
access control facility, said transaction management facility, and said authentication facility; and 

at said billing facility, generating and processing said billing data and sending a billing 
notice to a responsible party via said global data processing network. 
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71-91. (Canceled). 

92. (Original) A method for facilitating transaction processing and disposition within an 
access controlled environment, comprising the steps of: 

at a user system operated by a user, accessing an access control facility via a global data 
processing network, said access control facility configured to maintain user information related 
to said user; 

permitting or denying said user system operable access to an access controlled 
environment maintained within a data processing environment based on a profile related to said 
user including a user-specific level of security; 

at a transaction management facility coupled to said access control facility and operating 
within said access controlled environment, storing and maintaining data related to a transaction 
involving said user based on a predetermined security level to facilitate disposition of said 
transaction within said access controlled environment, said transaction management facility 
determining accessibility related to said data for said user based on said user's profile; 

at an authentication facility operating within said access control environment, 
authenticating said data related to said transaction based on a predetermined authentication level 
set to correspond to said transaction; 

at a communication facility coupled to said access control facility, said transaction 
management facility said authentication facility, and operating within said access controlled 
environment, communicating with external systems to facilitate disposition of said transaction 
based on said data stored and maintained by said transaction management facility; and 

at a billing facility operating within said access controlled environment, consolidating 
data related to internal operations performed by said access control facility, said transaction 
management facility, and said authentication facility, generating and processing billing data, and 
sending a billing notice based on said billing data to a responsible party via said global data 
processing network. 



93-115. (Canceled). 
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116. (Original) A method for facilitating processing and disposition of a dispute involving a 
plurality of transaction parties within an access controlled environment, comprising the steps of: 

at an access control facility accessible via a global data processing network, creating and 
maintaining user security profiles related to said plurality of transaction parties; 

at said access control facility, permitting or denying a user to login into an access 
controlled environment maintained within a data processing environment based upon said user 
and at least one of said user security profiles corresponding to said user; 

if said user is permitted to login, at said access control facility, providing operative access 
to said user to a transaction management facility operating within said access controlled 
environment and configured to store and maintain data related to disputes; 

at said transaction management facility, permitting user to create, update and delete 
transaction data based on said dispute and a predetermined security level to facilitate disposition 
of said transaction within said access controlled environment; 

at an authentication facility, requiring said user to enter authentication data related to said 
transaction data in order to authenticate said transaction data based on a predetermined 
authentication scheme; 

at said transaction management facility, permitting said user to enter said authentication 

data; 

at said transaction management facility, notifying said user if a decision needs to be made 
based on said transaction data and/or said authentication data; 

at said transaction management facility, allowing said user to enter a decision in order to 
dispose of said dispute; 

at a communications facility, notifying said plurality of transaction parties of said 
decision via said global data network; 

at a billing facility, consolidating data related to internal operations performed by said 
access control facility, said transaction management facility, and said authentication facility; and 

at said billing facility, generating and processing said billing data and sending a billing 
notice to at least one of said transaction parties via said global data processing network. 



AMENDMENT AND RESPONSE UNDER 37 C.F.R § 1.111 Page 10 

Serial Number:09/7 18,097 Dkt: 962.077US1 

Filing Date: November 22, 2000 

Title: SYSTEM AND METHOD FOR FACILITATING TRANSACTION PROCESSING AND DISPOSITION WITHIN AN ACCESS 
CONTROLLED ENVIRONMENT VIA A GLOBAL NETWORK SUCH AS THE INTERNET 



117-136. (Canceled). 



137. (Previously Presented) The method of claim 70, further comprising: 

at the access control facility accessible via a global data processing network, creating and 
maintaining user security profiles related to a plurality of transaction parties; 

at the access control facility, permitting or denying a user to login into the access 
controlled environment maintained within the data processing environment based upon the user 
and at least one of the user security profiles corresponding to the user; 

if the user is permitted to login, at the access control facility, providing operative access 
to the user to the transaction management facility operating within the access controlled 
environment and configured to store and maintain data related to disputes; 

at the transaction management facility, permitting the user to create, update and delete 
transaction data based on the dispute and a predetermined security level to facilitate disposition 
of the transaction within the access controlled environment; 

at the authentication facility, requiring the user to enter authentication data related to the 
transaction data in order to authenticate the transaction data based on a predetermined 
authentication scheme; 

at the transaction management facility, permitting the user to enter the authentication 

data; 

at the transaction management facility, notifying the user if a decision needs to be made 
based on the transaction data and/or the authentication data; 

at the transaction management facility, allowing the user to enter a decision in order to 
dispose of the dispute; 

at a communications facility, notifying the plurality of transaction parties of the decision 
via the global data network; 

at the billing facility, consolidating data related to internal operations performed by the 
access control facility, the transaction management facility, and the authentication facility; and 
at the billing facility, generating and processing the billing data and sending a billing notice to at 
least one of the transaction parties via the global data processing network. 
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138. (New) The system according to claim 1 , wherein said authentication facility receives 
metadata used to authenticate said transaction data, automatically evaluates the transaction data 
using the metadata to obtain a result of the authentication, and stores the result within the 
transaction management facility. 

139. (New) The system according to claim 1, wherein said authentication facility receives 
metadata used to authenticate said transaction data, determines whether said business matter data 
can be automatically authenticated, and if not, then presents said metadata to a decision maker 
for producing a decision on the authenticity of said business matter data. 



